infra

Author	SHA1	Message	Date
Julien Palard	2cb12d55d1	nginx: Unifying logs, we're at 600+ files in /var/log/nginx, it's unusable.	2023-02-13 23:33:35 +01:00
Julien Palard	a45cbbefcd	Hello HTTP/2	2023-02-13 22:40:47 +01:00
Julien Palard	b2af1120f9	Update SSL config. While proofreading the config, and checking if it was up to date according to: - Mozilla recommandations - SSLtest - testssl.sh I spotted an issue in the HSTS header: $ curl -I https://afpy.org [...] Strict-Transport-Security: max-age=63072000; always the `always` part is an nginx config token, not a cookie value. So I simplified the conf so we can more easily copy/paste from Mozilla generator, which obviously removed the bug.	2023-01-13 17:16:49 +01:00
Julien Palard	429bb00525	nginx role: allow to choose certbot authenticator.	2022-10-23 11:24:31 +02:00
Julien Palard	75c76b16a4	Make nginx listen on IPv6 (duplicate listen should not be usefull, but happen they are).	2021-12-30 21:33:48 +01:00
Julien Palard	0faa1cf53f	www.afpy.org migré.	2021-11-18 08:08:04 +01:00
Julien Palard	361cdc7696	certbot: Use DNS-01 instead of HTTP so it can work on other machines.	2021-09-10 14:12:50 +02:00